Back to skill
Skillv1.0.0

VirusTotal security

Umami Stats · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignMay 1, 2026, 3:36 AM
Hash
305b5a7ec2c1c8c8f266e22267bbd965a62df36658b9599361ba2ddec9805fe1
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: umami-stats Version: 1.0.0 The skill bundle is designed for read-only querying of the Umami analytics API. The `SKILL.md` explicitly states a read-only purpose and provides safe usage examples, with no evidence of prompt injection attempts. The `scripts/umami_query.py` script uses standard Python libraries to make HTTP GET requests to a configurable Umami API endpoint, retrieving the API key from environment variables or command-line arguments. It does not access sensitive local files, execute arbitrary commands, or exfiltrate data to unauthorized destinations, aligning entirely with its stated function.
External report
View on VirusTotal